2015-06-08 18:17:15 +02:00
|
|
|
package aws
|
|
|
|
|
|
|
|
import (
|
2015-06-08 21:20:39 +02:00
|
|
|
"fmt"
|
2015-06-08 18:17:15 +02:00
|
|
|
"log"
|
|
|
|
|
|
|
|
"github.com/aws/aws-sdk-go/aws"
|
2015-06-08 21:20:39 +02:00
|
|
|
"github.com/aws/aws-sdk-go/aws/awserr"
|
2015-06-08 18:17:15 +02:00
|
|
|
"github.com/aws/aws-sdk-go/service/iam"
|
|
|
|
"github.com/hashicorp/terraform/helper/schema"
|
|
|
|
)
|
|
|
|
|
|
|
|
func resourceAwsIamGroupMembership() *schema.Resource {
|
|
|
|
return &schema.Resource{
|
|
|
|
Create: resourceAwsIamGroupMembershipCreate,
|
|
|
|
Read: resourceAwsIamGroupMembershipRead,
|
|
|
|
//Update: resourceAwsIamGroupMembershipUpdate,
|
|
|
|
Delete: resourceAwsIamGroupMembershipDelete,
|
|
|
|
|
|
|
|
Schema: map[string]*schema.Schema{
|
2015-06-08 21:20:39 +02:00
|
|
|
"name": &schema.Schema{
|
2015-06-08 18:17:15 +02:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Required: true,
|
|
|
|
ForceNew: true,
|
|
|
|
},
|
2015-06-08 21:20:39 +02:00
|
|
|
|
|
|
|
"users": &schema.Schema{
|
|
|
|
Type: schema.TypeSet,
|
|
|
|
Required: true,
|
|
|
|
Elem: &schema.Schema{Type: schema.TypeString},
|
|
|
|
Set: schema.HashString,
|
|
|
|
},
|
|
|
|
|
|
|
|
"group": &schema.Schema{
|
2015-06-08 18:17:15 +02:00
|
|
|
Type: schema.TypeString,
|
|
|
|
Required: true,
|
|
|
|
ForceNew: true,
|
|
|
|
},
|
|
|
|
},
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
func resourceAwsIamGroupMembershipCreate(d *schema.ResourceData, meta interface{}) error {
|
|
|
|
conn := meta.(*AWSClient).iamconn
|
|
|
|
|
2015-06-08 21:20:39 +02:00
|
|
|
userList := expandStringList(d.Get("users").(*schema.Set).List())
|
|
|
|
group := d.Get("group").(string)
|
2015-06-08 18:17:15 +02:00
|
|
|
|
2015-06-08 21:20:39 +02:00
|
|
|
for _, u := range userList {
|
|
|
|
_, err := conn.AddUserToGroup(&iam.AddUserToGroupInput{
|
|
|
|
UserName: u,
|
|
|
|
GroupName: aws.String(group),
|
|
|
|
})
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
2015-06-08 18:17:15 +02:00
|
|
|
}
|
|
|
|
|
2015-06-08 21:20:39 +02:00
|
|
|
d.SetId(d.Get("name").(string))
|
2015-06-08 18:17:15 +02:00
|
|
|
return resourceAwsIamGroupMembershipRead(d, meta)
|
|
|
|
}
|
|
|
|
|
|
|
|
func resourceAwsIamGroupMembershipRead(d *schema.ResourceData, meta interface{}) error {
|
|
|
|
conn := meta.(*AWSClient).iamconn
|
2015-06-08 21:20:39 +02:00
|
|
|
resp, err := conn.GetGroup(&iam.GetGroupInput{
|
|
|
|
GroupName: aws.String(d.Get("group").(string)),
|
2015-06-08 18:17:15 +02:00
|
|
|
})
|
|
|
|
|
|
|
|
if err != nil {
|
2015-06-08 21:20:39 +02:00
|
|
|
if awsErr, ok := err.(awserr.Error); ok {
|
|
|
|
// aws specific error
|
|
|
|
log.Printf("\n\n------\n AWS Error: %s :::: %s", awsErr.Code(), awsErr.Message())
|
|
|
|
// group not found
|
|
|
|
d.SetId("")
|
|
|
|
}
|
2015-06-08 18:17:15 +02:00
|
|
|
return err
|
|
|
|
}
|
|
|
|
|
2015-06-08 21:20:39 +02:00
|
|
|
ul := make([]string, 0, len(resp.Users))
|
|
|
|
for _, u := range resp.Users {
|
|
|
|
ul = append(ul, *u.UserName)
|
2015-06-08 18:17:15 +02:00
|
|
|
}
|
|
|
|
|
2015-06-08 21:20:39 +02:00
|
|
|
if err := d.Set("users", ul); err != nil {
|
|
|
|
return fmt.Errorf("[WARN] Error setting user list from IAM Group Membership (%s), error: %s", err)
|
2015-06-08 18:17:15 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
func resourceAwsIamGroupMembershipDelete(d *schema.ResourceData, meta interface{}) error {
|
|
|
|
conn := meta.(*AWSClient).iamconn
|
2015-06-08 21:20:39 +02:00
|
|
|
userList := expandStringList(d.Get("users").(*schema.Set).List())
|
|
|
|
group := d.Get("group").(string)
|
2015-06-08 18:17:15 +02:00
|
|
|
|
2015-06-08 21:20:39 +02:00
|
|
|
for _, u := range userList {
|
|
|
|
_, err := conn.RemoveUserFromGroup(&iam.RemoveUserFromGroupInput{
|
|
|
|
UserName: u,
|
|
|
|
GroupName: aws.String(group),
|
|
|
|
})
|
|
|
|
|
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
2015-06-08 18:17:15 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
d.SetId("")
|
|
|
|
return nil
|
|
|
|
}
|